arno
/
pi-hole
mirror of https://github.com/pi-hole/pi-hole
1
0
Fork 0
Code Issues Releases Wiki Activity

set X-XSS-Protection headers to 0 in lighttpd.conf

Browse Source 
Signed-off-by: Neill Wolf <neillawolf@gmail.com>
pull/5069/head
Neill Wolf 1 year ago
parent a5d10a6256
commit d245226053
No known key found for this signature in database
GPG Key ID: B59575BB2EE2340A
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File

2
advanced/lighttpd.conf.debian
Unescape View File

@ -90,7 +90,7 @@ $HTTP["url"] =~ "^/admin/" {
setenv.add-response-header = (
"X-Pi-hole" => "The Pi-hole Web interface is working!",
"X-Frame-Options" => "DENY",
"X-XSS-Protection" => "1; mode=block",
"X-XSS-Protection" => "0",
"X-Content-Type-Options" => "nosniff",
"Content-Security-Policy" => "default-src 'self' 'unsafe-inline';",
"X-Permitted-Cross-Domain-Policies" => "none",

2
advanced/lighttpd.conf.fedora
Unescape View File

@ -98,7 +98,7 @@ $HTTP["url"] =~ "^/admin/" {
setenv.add-response-header = (
"X-Pi-hole" => "The Pi-hole Web interface is working!",
"X-Frame-Options" => "DENY",
"X-XSS-Protection" => "1; mode=block",
"X-XSS-Protection" => "0",
"X-Content-Type-Options" => "nosniff",
"Content-Security-Policy" => "default-src 'self' 'unsafe-inline';",
"X-Permitted-Cross-Domain-Policies" => "none",

Write Preview
Loading…
Cancel
Save